CVE-2025-11990

Nov. 15, 2025, 8:15 a.m.

3.1
Low

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

Product(s) Impacted

Vendor Product Versions
Gitlab
  • Gitlab
  • 18.4, 18.5

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-177
Improper Handling of URL Encoding (Hex Encoding)
The product does not properly handle when all or part of an input has been URL encoded.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
a gitlab gitlab 18.4 <18.4.4 / / / / / /
a gitlab gitlab 18.5 <18.5.2 / / / / / /

References

https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/
https://gitlab.com/gitlab-org/gitlab/-/issues/577850
https://hackerone.com/reports/3257843

Tags

cve@gitlab.com
CWE-177
2025-11-15
CVE-2025-11990

CVSS Score

3.1 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: HIGH
  • Privileges Required: NONE
  • Scope: UNCHANGED
  • Confidentiality Impact: LOW
  • Integrity Impact: NONE
  • Availability Impact: NONE

    • CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

    View Vector String

Timeline

Published: Nov. 15, 2025, 8:15 a.m.
Last Modified: Nov. 15, 2025, 8:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@gitlab.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.